> The solution is to use "find -L", although Wietse seems to
> have reservations about that (see his replies in the thread on
> postfix-users).

reference is
http://marc.info/?l=postfix-users&m=145687936712995&q=raw
msgid 3qfgk11pspzj...@spike.porcupine.org

that patch should be ok right? if symlink, it must have been put
there by root anyways so there is no additional danger by
following it...

here is his patch with debian line numbers, seems to work.

everyone on debian has these warnings emitted since these .so
file will always have symlinks in /usr/lib/postfix placed there
for the different sonames


--- a/conf/postfix-script
+++ b/conf/postfix-script
@@ -299,10 +304,17 @@
        }
        todo=`echo "$todo" | tr ' ' '\12' | sort -u`
 
-       find $todo ! -user root \
+       if find -L $config_directory/main.cf >/dev/null 2>&1
+       then
+           FIND="find -L"
+       else
+           FIND=find
+       fi
+
+       $FIND $todo ! -user root \
            -exec $WARN not owned by root: {} \;
 
-       find $todo \( -perm -020 -o -perm -002 \) \
+       $FIND $todo \( -perm -020 -o -perm -002 \) \
            -exec $WARN group or other writable: {} \;
 
        # Check Postfix mail_owner-owned directory tree owner/permissions.

Reply via email to